Stats
Actions
Tags
From semgrep-rule-creator
Creates Semgrep security rules with test-first methodology, using conversation context for detection patterns, target languages, and taint modes.
How this command is triggered — by the user, by Claude, or both
Slash command
/semgrep-rule-creator:semgrep-rule (uses conversation context for detection pattern)This command is limited to the following tools:
The summary Claude sees in its command listing — used to decide when to auto-load this command
# Create Semgrep Rule **Arguments:** $ARGUMENTS This command is context-driven. Use conversation context to understand: 1. The vulnerability or pattern to detect 2. The target language 3. Whether taint mode is appropriate If context is unclear, ask for a description of the pattern to detect. Invoke the `semgrep-rule-creator` skill for the full workflow.
Arguments: $ARGUMENTS
This command is context-driven. Use conversation context to understand:
If context is unclear, ask for a description of the pattern to detect.
Invoke the semgrep-rule-creator skill for the full workflow.
npx claudepluginhub trailofbits/skills --plugin semgrep-rule-creator/create-ruleCreates a custom Semgrep YAML detection rule from a vulnerability pattern in a finding ID or file:line location. Supports --output dir and --test flags, saves for future scans.
/semgrep-analyzeRuns Semgrep static analysis on files or directories with optional ruleset, producing structured JSON findings with status, issues by severity/location/rule, and summary.
/securityConducts security reviews of apps, APIs, scripts, and configs using OWASP Top 10 best practices and threat modeling; detects vulnerabilities and suggests fixes.
/kasi-securityRuns security audit on project codebase: detects stack (PHP/Node/Python/etc.), loads checklist, scans files for SQLi/XSS/CSRF/auth bypass/etc., outputs prioritized findings with confidence labels.
/scanRuns a multi-surface security scanner (SCA, secrets, authz, MCP, pipeline, logic, diff) with focused modes and supplementary output blocks. Exit codes convey severity.
/hookifyCreates custom behavioral rules from instructions to block or warn on unwanted actions like dangerous bash commands, debug code in files, or missing tests, saving regex-based rules to .claude/ files. Also analyzes conversation history for rule suggestions.